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We show that quantum entanglement has a very close classical analogue, namely secret classical 
correlations. The fundamental analogy stems from the behavior of quantum entanglement under 
local operations and classical communication and the behavior of secret correlations under local 
operations and public communication. A large number of derived analogies follow. In particular 
teleportation is analogous to the one-time-pad, the concept of "pure state" exists in the classical 
domain, entanglement concentration and dilution are essentially classical secrecy protocols, and 
single copy entanglement manipulations have such a close classical analog that the majorization 
results are reproduced in the classical setting. This analogy allows one to import questions from 
the quantum domain into the classical one, and vice-versa, helping to get a better understanding of 
both. Also, by identifying classical aspects of quantum entanglement it allows one to identify those 
aspects of entanglement which are uniquely quantum mechanical. 



I. INTRODUCTION 

In his pioneering paper of 1964 [n], J. Bell pointed 
out the non-local character of quantum mechanical long- 
distance correlations. Since then many novel aspects of 
non-locality have been uncovered, such as teleportation 
0, super-dense coding 0], and the capability to reduce 
the number of required bits of classical communication 
for implementing certain communication tasks (in the so 
called "communication complexity scenario") Q. Fur- 
thermore, entanglement and non-locality are at the core 
of quantum computation JSJ] and its capability of perform- 
ing computations faster than any classical computer. An 
enormous effort has been dedicated during the last few 
years to understanding the qualitative and quantitative 
properties of non- locality. In effect, quantum non-locality 
has become to be considered one of, if not the most rep- 
resentative aspect of quantum mechanics. Quite surpris- 
ingly we found, as we describe in the present paper, that 
there exists a quite close classical analog of quantum en- 
tanglement, namely secret classical correlations. 

Our motivation in looking for a classical analog of 
quantum entanglement is two-fold. Firstly, such an anal- 
ogy allows us to identify aspects of quantum entangle- 
ment which were hitherto considered to be purely quan- 
tum but which are in fact not quantum at all. In- 
deed, all those aspects of entanglement which are com- 
mon with the classical analog, are not of a quantum na- 
ture. As a corollary we also get a better understanding of 
what are the true quantum features of quantum entangle- 
ment. Secondly, this analogy allows one to transfer ques- 
tions from quantum entanglement to the classical domain 
(classical information cryptography) and vice-versa and 
thus lead to a better understanding of both subjects. In 
fact, the inspiration for our paper stems from the work of 



N. Gisin and S. Wolf 0] which asked if there is a classical 
analog of bound entanglement. 

The analogy we suggest is summarized in the following 
table: 



quantum 
entanglement 

quantum 
communication 

classical 
communication 

local actions 



secret classical 
correlations 

secret classical 
communication 

public classical 
communication 

local actions 



Thus we suggest that a classical analog of a pair of 
entangled particles is that of one sample of two secret, 
correlated, random variables (one at each remote party). 
Here by secret communication we mean communication 
through a channel to which an eavesdropper has no ac- 
cess. By public communication we understand commu- 
nication through a channel to which an eavesdropper has 
full access (can hear everything), but cannot alter the 
messages sent, nor introduce new messages. Finally, in 
the quantum context by local actions we understand sub- 
jecting the q-bits to unitary evolutions as well as to mea- 
surements and other non- unitary evolutions. The classi- 
cal analog of unitary transformations is that of replacing 
the value of the original random variable by some new 
value related to the old one by a one-to-one function, 
while the analog of the case of quantum non-unitary evo- 
lutions is that of transformation by non bijective func- 



tions. 

The main idea of this analogy is that as with quantum 
entanglement, secret classical correlations act as a (fungi- 
ble) resource and obey a "second law of thermodynamics" 
principle - the amount of secrecy doesn't increase under 
LOPC (local actions and public communication). 

The modern paradigm is that of quantum non-locality 
as a resource as we describe below . 

• Non-local correlations between two or more remote 
parties can be created by quantum communication, 
i.e. by sending quantum particles (q-bits) from a 
common source to the parties, or from one party to 
another. 

• Second law of thermodynamics: The amount of 
non-locality between the remote parties cannot be 
increased by local actions and/or classical commu- 
nication (LOCC). 

Indeed, one can view this statement as the very 
definition of what non-locality is. 

The above version of the second law can be fur- 
ther extended to allow for quantum communica- 
tion, catalysis, etc.. For example " By local 
actions, classical communication and exchange of n 
q-bits, the amount of non- locality between remote 
parties cannot be increased by more that n e-bits" . 

• The remote parties can, by local actions and clas- 
sical communication, transform non-locality from 
one form into another. 

For example, suppose two parties, Alice and Bob, 
have a large number of pairs of particles, each pair 
in some pure, non-maximally entangled state. By 



appropriate actions they can end up with a smaller 
number of pairs in maximally entangled states [pj , 
0. In effect, at least in the case of bi-partite pure 
states, non-locality is absolutely fungible - any form 
can be transformed into any other, and the trans- 
formation is reversible. Thus it doesn't really mat- 
ter in which form the parties are supplied with non- 
locality, they can always convert it into the form 
which is required for implementing the specific task 
(for example teleportation) they want to do. 

• Non-locality is consumed for producing useful tasks 
(teleportation, super-dense coding, remote imple- 
mentation of joint unitary transformations [BJ, 
etc.). 

As with quantum non-local correlations, secret corre- 
lations are also a resource. 

• Secret correlations can be established between re- 
mote parties by secret communication. 

• "Second law of thermodynamics" : The amount of 
secret correlations cannot be increased by local ac- 
tions and/or public communication (LOPC)^. 

In fact, as with the case of non-locality, we can take 
this law to be the very definition of the amount of 
secret correlations, i.e. the amount of secret corre- 
lations between remote parties is that part of their 
correlations which cannot be increased by local ac- 
tions and public classical communication. 

The above version of the second law can be fur- 
ther extended to allow for secret communication, 



^Note that when we replace the original value of the random 
variable by another via a non-bijective function, we consider 
that we actually erase the original information, so information 
is lost. This is completely analogous to what happens in the 
quantum case. Of course, one may argue that in neither case 
information is lost. For example, in the non-collapse interpre- 
tations of the quantum case all we have is an entanglement 
of the measured system with the measuring device; this en- 
tanglement however involves so many degrees of freedom that 
it cannot be reversed. Similarly, erasing say pencil markings 
from a paper still preserves the original information in some 
subtle arrangement of the graphite granules mixed with bits 
of paper and erasing gum, but this involves so many degrees 
of freedom that the original information cannot be recovered. 

^In everyday practice, secret messages are exchanged by 
public communication by so called "public key distribution" 
protocols. We do not consider here this case since these are 
only pseudo secret messages - their secrecy is based on en- 
coding which is difficult to decode due to computational com- 
plexity; in principle however an eavesdropper could decode 
the message. 



catalysis, etc. For example " By local actions, pub- 
lic communication and exchange of n secret bits, 
the amount of secret correlations between remote 
parties cannot be increased by more that n secret 
correlation bits" . 

• The remote parties can, by local actions and public 
communication, transform secret correlations from 
one form into another. 

• Analogous to entanglement, secret correlations are 
a fungible resource - they can be stored, trans- 
formed from one form into another, and can be 
consumed to perform useful tasks, such as secret 
communication via the one time pad pOf . 

The possibility of transforming secret correlations from 
one form into another enables us, similarly to the case of 
quantum correlations, to obtain a quantitative descrip- 
tion of secrecy. 

In the bi-partite case, the analogy is now obvious: 

Shared, undirected resources: 



e - bitAB 
Directed resources: 
qubitA-^B 
classical bitA-^s 



shared secret bitAB 



secret bitA^B 



public classical bitA^B 



The situation of multi-partite secret correlations is 
more complicated, as is the situation of multi-partite en- 
tanglement. It is now clear that there are many different, 
irreducible, types of multi-partite entanglement [|ll|, p2[ ; 
this is also the case for secret correlations. 

At this point it is legitimate to ask what is the role 
of secrecy. That is, why do we consider secret classical 
correlations to be the analogue of entanglement and not 
simply any classical correlations. There are two main 
reasons. First of all, while such an analogy is certainly 
possible, it would be rather uninteresting. Indeed, one of 
the main aspects of manipulating entanglement is that 
there is a way in which the different parties may comnui- 
nicate (classical communication) which doesn't increase 
the amount of entanglement. Similarly in the case of se- 
cret classical correlations, public communication doesn't 
increase the amount of secrecy. In the case of arbitrary 
classical correlations however there is no way in which the 
remote parties could communicate and not increase the 
correlations. So when trying to build an LOCC ("local 
operations and classical communications" ) analog in the 
case of arbitrary classical correlations we have no choice 
but to completely eliminate the communication, which 
leads to a very uninteresting situation. 

The second reason is far more profound. Consider for 
example two parties, Alice and Bob who share, say, a 
maximally entangled state |*) = -^jdO) |0) -h |1) |1)). 



Suppose now that Alice and Bob "degrade" the state 
by "erasing" the entanglement. They can do this in a 
minimal way by, say, Alice randomizing the phase of 
her basis state vectors {|0) , |1)}. Then Alice and Bob 
wiU be left with a mixture of -75(10) |0) + |1) |1)) and 

-75(10) |0) — 11) |1)) with equal probabilities. This mixture 
contains no entanglement (it is equivalent to an equal 
mixture of |0) |0) and |1) |1)) but contains secret corre- 
lations between Alice and Bob. Thus secret correlations 
are in fact very closely related to entanglement. 

The analogies described above are the "fundamental" 
analogies. From them follow an entire set of derived 
analogies. We would like to emphasize however that it 
is only the fundamental analogies (such as the behavior 
under LOCC/LOPC) which have truly deep significance 
and that one shouldn't expect the derived analogies to be 
very close (though many of them are). Derived analogies 
are summarized in the following table: 



teleportation 

entanglement 
concentration 

entanglement 
dilution 

entanglement 
purification 

single copy 
transformations 

probabilistic single 
copy transformations 

catalytic 
transformations 

bound 
entanglement 



one-time pad 

secret correlation 
concentration 

secret correlation 
dilution 

classical privacy 
amplification 

single copy 
transformations 

probabilistic single 
copy transformations 

catalytic 
transformations 

bound 
information ? 



II. QUANTUM STATES AND CLASSICAL 
ANALOGUES 



In the previous section we suggested that classical se- 
cret correlations are a good analog for quantum entan- 
glement. Again, the basis of the analogy is the similar 
behavior of secret correlation and quantum entanglement 
under LOPC/LOCC. To make the analogy more detailed 
and to obtain the "derived" analogies mentioned above 
we need to define more precisely the analogy between 
quantum states and secret correlations. 



Consider two remote parties, Alice and Bob. A gen- 
eral quantum state is described by a density matrix pab 
or, equivalently, by a pure state '^ abe in which A and 
B are entangled with a third party, the "environment" . 
The classical equivalent of the general quantum state is a 
probability distribution P{XatXb,Xe) where Xa^ Xb 
and Xe are random variables known to Alice, Bob and 
Eve (the eavesdropper) respectively. One copy of a quan- 
tum state '^ ABE corresponds to one sample of the prob- 
abihty distribution P{Xa,Xb,Xe)- 

A quantum bi-partite pure state can always be written 
in the Schmidt basis lIT^ as 



I AB 



^Vp^V)aV)b^ 



(1) 



If Alice and Bob measure their particles in the Schmidt 
basis then they get correlated random variables, Xa and 
Xb, which come according to the distribution p{Xa = 
i,XB — j) — SijPi. In other words, they both get the 
same sample from a random variable X ~ {Pi}- Fur- 
thermore, the values of Xa and Xb are secret - there is 
no third party E who knows them. We propose classical 
distributions of this form as the classical "pure" state. 
That is, a bi-partite classical pure state is a distribution 



p{X^ 



..Xf 



j,XE = k) = 5,jP,P{Ek) 



(2) 



where P{Ek) is the distribution of eavesdropper's vari- 
able Xe and it completely irrelevant, except for the fact 
that it is completely uncorrelated to the distribution of 
Xa and Xb^- Strictly speaking, we propose (||) as the 
classical analogue of the pure state Schmidt decomposi- 
tion, and any classical state which is locally equivalent, 
ie. can be transformed into the above form by local, one- 
to-one mappings (the equivalent of local unitaries) we 
consider to be a pure state. 

Another interesting case is that of distributions of the 
form p{Xa = i,XB = J,Xe = fc) = P{Xa = i.Xb = 
j)P{Ek) in which E is completely uncorrelated with A 
and B, but A and B are not completely correlated with 
each other. Such a distribution is obtained when Alice 
and/or Bob measure a quantum pure state in some other 
basis than the Schmidt one. Such a distribution has some 
characteristics of a pure state and some characteristics of 
a mixed state. We will discuss in more detail this case in 



For more than two parties the analogue of a 
density matrix pabc... is a probability distribution 
P{XatXbtXct--)- It is not yet clear to us what the 
general analogue of a multi-partite pure state is. This is 
due, in part, to the fact that for multi-partite states the 
analog of the Schmidt decomposition is far more com- 
plicated. We shall give some multipartite results in sec- 
tion 



XII 



III. TELEPORTATION AND THE ONE TIME 
PAD 

The first "derived" analogy is probably the most strik- 
ing of all. The fundamental quantum communication 
protocol that is teleportation turns out to be analogous 
to the fundamental secret communication protocol, the 
one-time pad ||l4[] . 

Alice begins with the qubit (secret bit) to be sent, 
which may be entangled (secretly-correlated) with any 
number of other particles (bits). She does a Bell mea- 
surement (addition modulo 2) on the qubit (secret bit) 
to be sent and the qubit (bit) of resource she holds. She 
then sends the outcome (result) of this operation as a 
classical bit (public bit) to Bob. He then does a condi- 
tional unitary (bit flip) upon his part of the e-bit (shared 
secret bit). Bob now holds the qubit (secret bit) Alice 
was sending him. 

The necessary and sufficient resources are given by: 

le — bitAB + ^classical bitsA^B ^ IqubitA^B (3) 



Ishared secret bitAB + Ipublic bitA^B 



Isecret bitA^B 
(4) 



section XI 



By necessary we mean that, if we were to try to do the 
teleportation with less than 1 e-bit - by using a less than 
maximally entangled state for example - the teleportation 
will not give a perfect output, and the classical informa- 
tion will give some information about the qubit we are 
sending. If we try to use a less than completely corre- 
lated shared secret bit to send a secret bit then Eve gets 
some information about the secret bit. The resources are 
sufficient since we can achieve the operations using them. 



^Note that quantum mechanically in order to say that the 
state of Alice and Bob is pure we don't need to specify that 
the state of Ahce, Bob and the Environment is of the form 

\''I')abe ~ W AB h^) 1 t>ut it is enough to know the state 
Pab of Ahce and Bob alone. On the other hand, the classical 
correlations of Alice and Bob alone do not allow us to know 
if Eve is, or is not, correlated with Alice and Bob, therefore 
we must always describe the full state of Alice, Bob and Eve. 



Note that the resources are used up in the process: 
once we have used an e-bit (shared secret bit) to send 
a qubit (shared secret bit) we cannot reuse it. Quan- 
tum mechanicahy this is obvious, since the original max- 
imally entangled state is destroyed by Alice's measure- 
ment. Classically however Alice and Bob do not lose their 
correlated bits - Alice and Bob need not erase or physi- 
cally modify in any way their original correlated bits but 
just use them for some mathematical operations. What 
is lost however is the secrecy of these bits - they cannot 
be reused. 

Furthermore, it is obvious to see that the one-time pad 
secret communication can be used to implement the ana- 
log of teleportation of entangled states and of entangle- 
ment swapping. 

Finally, let us note an important fact. Quantitatively 
the amount of resources in the classical and quantum 
cases are similar but not identical: but we need 2 classical 
bitsA^B to send 1 qubit, whereas only 1 public bitA^B 
to send 1 secret bit. 



IV. ENTANGLEMENT AND SECRET 

CORRELATION MANIPULATIONS - SINGLE 

COPY 

The ability to manipulate entanglement, i.e. trans- 
forming entanglement from one form into another by lo- 
cal actions and classical communications is one of the 
most important aspects of entanglement. This leads 
to elevating entanglement to the status of a (fungible) 
resource: to a large extent it doesn't matter in which 
form entanglement is supplied, we can transform it into 
the specific form we need for different applications, very 
much as say, transforming the chemical energy stored in 
coal into electrical energy for use in electric engines. Sim- 
ilarly one can imagine that Alice and Bob are supplied 
with secret correlations in some given form, i.e. according 
to some specific probability distribution, and they want 
to obtain secret correlations obeying a different probabil- 
ity distribution. We find that the quantum and classical 
scenarios are in very close analogy. 

In this section we treat the case of bi-partite pure state 
single copy manipulations. In the quantum context this 
means that the two parties, Alice and Bob, share a single 
pair of particles in some pure state 1^)^^. In the clas- 
sical context, Alice and Bob share a single sample of a 
classical pure-state (||). 

In the case of a single copy, entanglement is not a com- 
pletely interconvertible resource (as it is in the case of 



many copies (see section VIII)), but many more restric- 
tions apply. 

For bipartite pure quantum states, it is possible to turn 
one state into another with certainty if and only if a cer- 
tain set of conditions, collectively known as majorization, 
holds llTsi, |l6|. We here show that for classical secret 



pure states, the transformation is possible if and only if 
an analogous condition holds. 

Quantum mechanically the majorization condition is 
the following. Consider two quantum pure states \'iP)ab 



and 



MS' 



written in their Schmidt bases 



w 



AB 



I AB 



IB ' 



E 



K)aK) 



B ' 



(5) 



(6) 



with the squared Schmidt coefficients pi and qi arranged 
in decreasing order, pi > p2 > ■•■ and gi > (72 > •■■• The 
vector q = {qi} is said to majorize the vector p = {pi\ iff 



E*^E^ 



Vfc. 



(7) 



\4') AB ^^ ^^^"^ t*-* rnajorize \ip) ab ^^ (f majorizes p. The 
transformation IV') as '"^ \4') ab ^® possible with certainty 
if and only if \<t>) ab niajorizes |V')a_b P^- (Note that it 
is the final state which must majorize the starting one.) 
For classical secret correlations, suppose Alice and Bob 
begin with an arbitrary classical bipartite pure state, 
which we may write as 

p{Xa ^i.Xb^ J, XE = k) = 5,,p,P{Ek). (8) 

Their task it to produce some other state, 

p{Ya ^i,YB^ J, Ys^k)^ 5^jq^P'{Ek). (9) 

We shall prove that they can do this iff q majorizes p. 
However, to understand what is going on, let us first 
consider a simple example which has all the important 
features. The quantum version was first considered in 

Suppose Alice and Bob share one sample of the classi- 
cal pure state X , where 



1 

Pl^P2=PZ= g, 



(10) 



and they would like to turn it into a sample of the pure 
state Y , where 



91=92=2- 



(11) 



A probabilistic method (analogous to the procustean 
method for the quantum case |q|) is for Alice to send 
message toi (which means "OK") if X is 1 or 2, and to 
send message TO2 (which means "not OK") if X is 3. If 
message toi is sent then Alice and Bob keep their sam- 
ple, and they now have a shared secret random variable 
of the form Y . Indeed, in this case Eve only knows that 
the value of the secret variable is either 1 or 2 but she 



doesn't know which one - Ahce and Bob's data is there- 
fore still perfectly secret, and it is now either 1 or 2 with 
probability 1/2. If message m2 is sent then the proce- 
dure failed and Alice and Bob have to throw away their 
sample. The reason is that Eve, who monitors the public 
communication, learns that Alice and Bob's variable is 
equal to 3, and there is no more Alice and Bob can do. 

The above method works with probability |. Can Al- 
ice and Bob do better? The second distribution ma- 
jorizes the first, since i > i, \ + \ > 5 + I and 
^-l-^-l-O > 3 + 1 + f- Thus, according to the ma- 
jorization theorem we shall shortly prove, there exists a 
method which works with certainty. The protocol for 
achieving this goes as follows. Alice reads the value of X. 
If it is 1, she flips an unbiased coin which tells her to send 
message mi or 7712 with equal probability. If X = 2 she 
flips an unbiased coin to send m2 or 7713, and if X = 3 
she flips an unbiased coin to send mi or TO3. She then 
publicly sends the message, so that everyone can read it. 
If nil is sent, Eve knows that X is 1 or 3 with equal prob- 
ability. If 7712 is sent. Eve knows that X is either 1 or 2, 
with equal probability. And if TO3 is sent. Eve knows that 
X is 2 or 3 with equal probability. Now Alice and Bob 
just have to do a simple relabelling of X to produce Y. 
If mi is sent, they both do 1 i-^- 1, 3 i—s- 2. If 7712 was sent 
they do 1 1-^ 1, 2 1-^ 2. If TO3 is sent they do 2 1-^ 1, 3 1— > 2. 
Whatever message was sent, Y is now a shared random 
variable which is (as far as Eve is concerned) a shared 
secret bit of the form (O). 



this knowledge Alice and Bob must decide on the values 
of Ya and Yg . Formally, we can write 



Now we shall look at the general case. For which pure 
states X and Y is it possible to turn a single sample of 
X into a single sample of Y? Consider the most general 
possible protocol. We assume that Alice, Bob and Eve 
all know the protocol*. Alice and Bob start by having a 
single sample of the pure state X. They each have also 
access to some local source of secret randomness - they 
may each throw dice. Of course, Alice knows only the 
outcomes of her dice and Bob of his. During the proto- 
col Alice and Bob may publicly communicate, perhaps in 
many rounds, with each message determined by X, the 
public messages already sent, and by the results of the 
local dice. At the end of the protocol there will be some 
total public message which consists of all the messages 
that were exchanged by Alice and Bob. All three parties, 
Alice, Bob and Eve know this total message. In addition, 
Alice and Bob know the value of X (which is common to 
both of them since the state is pure), and each of them 
knows the outcomes of his/her own dice. Based on all 



Ya = fA{XA,m,dA) 



Yb = fB{XB,m,dB) 



(12) 



(13) 



where by tu we denote the total message, and by dA and 
dB we denote the outcome of all Alice's and Bob's dice. 
The above procedure can be simplified. Since we begin 
with a pure state, Xa = Xb — X. Furthermore, since 
we want to end with a pure state, we require Ya = Yb- 
This requirement implies that Ya and Yb cannot depend 
on the outcome of the dice dA and dB- Also given the 
initial value X and the message m, Alice and Bob must 
perform the same function /. Thus we get 



YA^YB^f{X,m). 



(14) 



Furthermore, since Bob's actions may not depend on 
the outcomes of his dice but only on X and m, for every 
procedure which involves many rounds of communication 
between Alice and Bob, we can formulate an equivalent 
procedure in which the total message is entirely gener- 
ated by Alice - she could simply throw all dice herself - 
and then communicate the message in a single transmis- 
sion to Bob. 

Let us now formalise this procedure for turning X into 
Y. 

Alice looks at A" = xi, which occurs with probabil- 
ity Pi. She then throws a biased dice which tells her to 
send message 77ij with some probability p{7nj\xi) which 
depends upon Xi. She then publicly announces rrij. Al- 
ice and Bob now follow the instructions in the message, 
which say to do Xi 1— > yt {xi , tuj ) . Forgetting what X is 
(ie. summing over a;^) this gives them some joint distri- 
bution for Hk and mj, p{yk,7nj). Since Alice and Bob 
want yk to be secret from Eve, who knows only the pro- 
tocol and the message, this distribution must factorise: 
p{yk,7nj) = p{yk)p{7nj). p{yk) is the final distribution, 
and so we want p{yk) = qk (the distribution of Y). 

This secrecy procedure can be thought of as a sin- 
gle party problem, which goes as follows. We begin 
with a sample from X, which occurs with probability 
Pi. We may look at the sample, and then roll some dice 
which gives outcome tuj with probability p(mj\xi). We 
then perform the map Xi 1— > yk{xi,7nj). We then forget 
what X is, which gives some joint distribution for yk and 



*if Alice and Bob had a secret protocol, this would be like 
having an additional shared random variable, whose different 
outcomes told them which protocol to use. Thus they would 
have an additional resource. Here we insist they have only 
one shared resource, X. 



rUj, p{yk,mj). We desire this distribution to factorise, 
p{yk, rrij) = p{yk)p{rnj), and that p{yk) = qk- Note that 
this single party procedure is not a secrecy procedure, 
however it is possible iff the above secrecy transforma- 
tion is. 

To find for which pi and q^ this single party problem is 
possible, and thus to find for which pi and qj the secrecy 
transformation is possible, we shall look at the time re- 
versed problem. This goes as follows. We start with a 
sample from Y, which occurs with probability qk- We 
then roll dice, which give outcome rrij with probability 
p(jnj), independent of the outcome of Y. This gives a 
joint distribution p(yk, raj) = qkp{mj). Now we must do 
the inverse of the map Xi i— > yk {xi , mj ) to turn our Y into 
an X. If the map is one-to-one, and hence invertible, this 
will give us a distribution p{xi, mj). Like any joint distri- 
bution, this can be written as p{xi, rrij) = p{xi)p{mj\xi). 
If we now forget the value of Y and of nik, we get a new 
distribution for X, p{xi). We desire p{xi) = pi. If the 
map is many-to-one, then we can give it a probabilistic 
inverse which is a "one-to-many" map where the proba- 
bilities of getting various Xi's given any particular yk are 
given by the relative frequencies of the i^'s when yk is 
produced in the forward time protocol. This probabilis- 
tic one-to-many map can be replaced by a probabilistic 
choice of several one-to-one maps, which will have the 
same effect upon the protocol since we forget which map 
we did at the end. Thus in the reversed time single party 
problem, we need only consider maps which are one-to- 
one. This also applies to the forward time single party 
problem, and to the forward time secrecy protocol: we 
only need consider maps which are one-to-one, ie. per- 
mutations. 

As explained above, if we find the conditions for which 
the reversed time single party problem is possible, we will 
have the conditions for which the forward time secrecy 
transformation is possible. Physically, this time reversed 
single party problem goes as follows. We begin with a 
ball in some box according to the distribution qi . We do 
not know which box the ball is in, and are not allowed to 
look to see where it is. We then apply some shuffle (one- 
to-one relabelling) to the boxes, choosing which shuffle to 
make according to a distribution, p{mj), which we may 
choose. We then forget which shuffle we did, and look 
at the new distribution of the balls, pi. The question is 
for which qi and pi is this possible? Clearly pi should be 
more random than qi. This is a well-known problem, and 



is the context in which majorization appears in classical 
physics. The answer is that it is possible iff p majorises 
q. Intuitively this is easy to see, and the proof can be 
found, for example, in p^ . 

Above we have proved the majorization result in the 
classical context by using arguments referring solely to 
the classical context. We could have used however the 
known results for quantum entanglement manipulation 
to prove the classical ones. The reason is as follows. 
On one hand, it was found out that transforming pure 
quantum states (with certainty) from one into another in- 
volves only actions and measurements in the Schmidt de- 
composition basis. These actions do not involve phases, 
but are simply classical actions upon the basis, which are 
performed coherently to make a quantum evolution. One 
could, however, imagine starting by measuring the quan- 
tum state in the Schmidt basis, and then performing the 
corresponding classical actions and measurements upon 
the state. This transforms one classical state into an- 
other, and will not give Eve any knowledge about the 
state since the quantum procedure did not entangle the 
quantum state with the environment. Thus, if we can 
transform with certainty a quantum pure state \^) (0) 
into a quantum pure state |$) (g), we can also transform 
with certainty X (^ the classical pure state equivalent 
of 1^), into Y (g), the classical pure state equivalent of 
1$). 

To prove the reverse, that is, that X can be transform 
with certainty into Y only if the quantum analogs can 
be transformed from one into the other, we note that we 
can turn any classical transformation of pure states into 
a quantum one, simply by applying the classical opera- 
tions coherently, and performing the quantum actions in 
the Schmidt basis. Thus there cannot be any classical 
procedure which does better than the optimal quantum 
one. So the classical transformation is possible iff the 
quantum one is. ^ 



V. PROBABILISTIC SINGLE COPY 
MANIPULATIONS 

It may not be possible to transform a single copy of a 
resource from one form into another with certainty, but 
it may be possible to do it with some probability. What 
is the largest probability with which this can be done? 
For quantum states, the problem was considered in p5[. 



^Note however that although we can use the quantum result 
to prove the classical one, we cannot use the classical result 
to prove the quantum result. The reason is that although 
we can turn any classical transformation into a quantum one, 
we cannot generate this way all possible quantum protocols - 
indeed, they may involve phases outside the Schmidt basis. 



p8[ , and the general answer is given ||I^ in the simple 
form: 



1 
min — 

fc 1 



Ek 

Ek 



(15) 



We shall now show that for classical secret states, the 
answer is the same. 

As for the non-probabilistic transformations, we may 
simplify the most general protocol, which then goes as 
follows. Alice first looks at her sample which comes ac- 
cording to the distribution p{xi). She then chooses a 
message rrij according to p{mj\xi). Most of the possible 
messages will be ones for which the transformation suc- 
ceeds: these must say to do a one-to-one map^ X ^^ Y . 
The other messages say "fail" : for these it does not mat- 
ter what transformation we do, and it does not help to 
send more than one "fail" message. So we may assume 
we have only one "fail" message, mfau, which says to 
do Xi i—t j/i. Alice and Bob then do Xi i—f yk{xi,mj) 
according to the message. This gives them a distribu- 
tion p{yk,mj). In the case they succeed, this distribution 
must factorise: 



p{Vk,m.j 



/ P{yk)p{mj 



\ S{yk = l)p{mfaii) for j 



for j 7^ "fail" 



"fail" 



(16) 



By defining p{success) — A, so that p{mj) = 
Xp{mj\success) for j ^ ^^fail" and p(mfaii) = 1 — A and 
by requiring p{yk) = Qk (so that the protocol succeeds) 
we obtain: 



P{yk,mj 



Xqkp{mj\success) 
(1 - X)d{yk = 1) 



for j ^ "fail" 
for j = "fail" 



(17) 



The time reversed, single party version of this problem 
is to start by flipping a coin (H/T) with probabilities 
(A, 1 — A). We look at the result, and if it is T we start 
with 2/fc = 1, send a message mfaU, and are allowed to 
do anything (including probabilistic things) to transform 
Y 1-^ X. If the coin is H we get a sample yk according to 
PiVk) = (Ik, but do not know which sample we get. We 
then pick some message according to p{mj), and do the 
corresponding shuffle yk '-^ Xi. This gives some distribu- 
tion p{xi, rrij). Finally, we forget whether the coin was H 
or T, and also which message was sent. This then gives 
us p{xi), which we would like to be pi. Our aim is, for a 
given qk and pi , to find the maximal A for which this is 
possible. This problem is closely related to the one where 
majorization first appeared in classical physics, and the 
maximal value of A is as given at the start of this sec- 
tion. Once again the quantum and classical pure state 
manipulations are possible under the same conditions. 



VI. CATALYSIS OF SINGLE COPY 
TRANSFORMATIONS 



There is an interesting entanglement transformation 
called catalysis |19] which transfers easily to the classical 
case. Suppose we begin with some pure state 



l^)ylS = H^I")^B' 



(18) 



and wish to produce, using LOCC, the state 

Ex/97 |JJ>AS- (19) 



'AB 



This is possible pq iff Qj majorizes pt. There are, how- 
ever, states such that qj does not majorise pi, but where 
catalysis is possible. That is, where Alice and Bob cannot 
perform 

1^) ^ I'/') , (20) 

but if Alice and Bob share an additional pure state, 

fc 

then they are able to perform, with certainty, the trans- 
formation 



|X> ^ I'/') lx> 



(22) 



This is, quite simply, because for the tensor product sys- 
tem, the majorization condition holds. \x) acts as a 
catalyst. It enables the transformation of {t/j) into \(f>), 
but is not consumed in the process. One example of 
such a catalysis is transforming the quantum state whose 
squared Schmidt coefficients are 

Pi = 0.4;p2 = 0.4;p3 = 0.1;p4 = 0.1 (23) 

into the quantum state 

qi = 0.5; q2 = 0.25, ga = 0.25, (24) 

using the catalyst 

ri =0.6;r2 = 0.4. (25) 

The classical analogue of this process follows imme- 
diately. That is, Alice and Bob may wish to turn the 



There is no loss in generality in forgetting about the many- 
to-one maps, for the same reasons as in the non-probabilistic 
manipulations. 



classical pure state defined by pi into the classical pure 
state defined by qj, using LOPC. This is only possible, as 
we showed in section [V, when qj majorises pi. However 
there are cases when this is not possible, but if they also 
have a sample of the classical pure state r^, then they 
can achieve the transformation 



P(g)R^Q(g)R 



(26) 



with certainty. The sample R is not revealed or altered 
by this process, and can be subsequently used indepen- 
dently elsewhere. As far as we know, this classical secret 
correlation catalysis has not been previously considered. 



VII. SHUFFLING WITH CATALYSIS 

Another classical catalysis problem which has not (to 
our knowledge) been considered before is the single party, 
time reversed version^ of the classical pure state catalysis 
discussed in the previous section. We call this "shuffling 
catalysis" . We emphasize that this shuffling catalysis has, 
in itself, nothing to do with secrecy or secret correla- 
tions. However, it is possible to perform this shuffling 
catalysis iff the classical pure state catalysis is possible. 
Recalling (from section IV that the majorization condi- 
tions are easier to prove in the shuffling scenario than 
in the classical secret correlation scenario, studying shuf- 
fling catalysis may help in finding exactly when classical 
secret correlation (and, by analogy, entanglement) catal- 
ysis is possible. 

We state the problem of shuffling catalysis to make the 
idea clear. Suppose we have a sample from a distribution 
qj and wish to turn it into a sample from a distribution 
Pi. We are not allowed to look at the sample to see what 
it is, we can only throw dice whose probabilities (which 
we choose) are independent of which sample we have. 
We then make some permutation (shuffle) upon the out- 
comes, which suffle decided by the dice, and finally forget 
which one we did. As mentioned in section IV , this "shuf- 
fling" is possible iff qj majorizes pi. There are, however, 
distributions where qj does not majorize pi, and so can- 



not be turned into it directly, but where we can perform 
catalysis. This means that we can take a sample from a 
third distribution r-fc, such that qj (g) rk majorizes Pi(^rk, 
and then roll an independent dice and permute the pos- 
sible outcomes of the tensor product distribution to turn 
qj ^ rk into Pi^Tk- This catalysis is possible iff we can use 
Tfc to turn the shared secret correlation pure state pi into 



to the pure state qj. Thus an example of this shuffling 
catalysis is the example given in section|Vl|. 



VIII. PURE STATE CONCENTRATION AND 
DILUTION 

For many copies of a bipartite pure state, entangle- 
ment is a completely fungible resource. It can be con- 
verted from one form to another reversibly. Thus we can 
quantify the amount of entanglement by a single num- 
ber, the entropy of entanglement. We shall show that 
the same is true for classical pure bipartite states. That 
is, for such states, secret correlations are a completely 
fungible resource. They can be converted from one form 
to another reversibly, and can be quantified by a single 
number, the entropy of secrecy. 

We define the entropy of entanglement for a quantum 
pure state, E{\il>) j^g) as 



^(IV')Aij) = -^Pt'^0ZPt 



(27) 



where pi are the squares of the Schmidt coefflcients. 

The physical meaning of the entropy of entanglement 
is the following. When Alice and Bob share a large num- 
ber N of copies of some arbitrary pure state |'0)ab' they 
can convert them, in a reversible way, using only local 
operations and classical communication into a number 
K of copies of the maximally entangled state 



\t 
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AB 



|22) 



ABl 



where 



K 

N 



EmAB) 



(28) 



(29) 



as iV ^ oo. That is, the entropy of entanglement repre- 
sents the yield of singlets per copy of the original state 
\'^)ab- "^^^ operation of converting the states IV') as 
into maximally entangled states is called entanglement 
concentration 0] and the reverse operation is called en- 
tanglement dilution. 

Since entanglement cannot increase under LOCC, the 
above procedures are optimal, in the sense that concen- 
tration and dilution cannot produce more copies: if they 
could, we would be able to produce entangled states from 
nothing®. We can thus quantify the amount of entangle- 
ment in a state by its entropy of entanglement. Any state 
is worth that many maximally entangled states, since it 



''see section [fVI for the meaning of the single party, time 
reversed version of the classical pure state transformation. 

*It would be like the Carnot cycle for a perpetual motion 
machine. 



can be reversibly converted into that many states. We 
call one of these maximally entangled states an e-bit, and 
shall say that other states have an entanglement of E e- 
bits. Note that this quantity is additive. That is, if we 
have two states which individually have entanglement Ei 
and E2 , together they have entanglement Ei + E2- 

The quantum procedure of entanglement concentration 
can directly be mapped into an equivalent classical ana- 
log. The reason for this is that all the quantum actions 
used for entanglement concentration take place in the 
Schmidt decomposition bases, i.e. the unitary actions 
are all permutations in the Schmidt basis while the mea- 
surements are of operators whose eigenstates are direct 
products in the Schmidt basis. Hence all these actions 
are essentially classical. Furthermore the quantum pro- 
cedure does not require communication, so is completely 
secure. 

The quantum dilution protocol also has a classical ana- 
log. Indeed, the quantum dilution |^ involves only Schu- 
macher compression of quantum information and tele- 
portation. Both these protocols have classical analogs: 
Schumacher compression maps into Shannon data com- 
pression and teleportation is replaced by the one-time 
pad secret communication. 

Since secret correlations cannot increase under LOPC, 
these procedures are optimal. They allow us to reversibly 
convert N copies of the classical pure state X ^ pi into 
K copies of the shared secret bit Y ^ qj, 

P{Ya = 1, Fb = 1) = PiYA = 2, Is - 2) = i (30) 



2' 



where 



K 



T7 = -^Pilogpi 



N 



(31) 



We can thus quantify the amount of secret correlations 
by the entropy of secrecy, which is defined as the number 
of shared secret bits which can be produced per copy of 
the original state X. We note that this amount is equal 
to the mutual entropy between Xa and Xb, and is also 
equal to the local entropy of Xa , and to the local entropy 
ofXB. 



IX. ENTANGLEMENT PURIFICATION AND 
PRIVACY AMPLIFICATION 

An important procedure in quantum information is 
Entanglement Purification [pO[ , which turns mixed states 



into pure states, at the many copy level. The number of 
pure states produced per input mixed state is the yield. 
Analogous procedures for turning classical mixed 
states into classical pure states exist, though are usu- 
ally subdivided into two stages. The first stage takes the 
mixed state P{Xa, Xb, Xe) and turns it into a mixed 
state where Alice and Bob hold the same value, ie. of 
the form P{i,j, k) = 6ijP{i, i,k). This stage is known as 
Information Reconciliation pi|, because Alice and Bob 
are agreeing on a common value. The second stage takes 
the output of the first stage, and factors out Eve, to give a 
state of the form 5ijPiP{k). In other words it produces a 
pure state. This stage is known as Privacy Amplification 
pl| , because Alice and Bob are increasing the secrecy of 
their key by reducing (to 0) Eve's knowledge of it. 

In general it is not known what the optimal protocol is, 
and there may be different optimal protocols for different 
states. There are a few different schemes for the quantum 
and classical cases, but we do not wish to discuss the de- 
tails here, just to draw the analogy. Firstly, any informa- 
tion reconciliation/privacy amplification protocol may be 
used as a entanglement purification protocol. Secondly 
any entanglement purification protocol may be used as 
a information reconciliation/privacy amplification proto- 
col. We hope that a detailed study of the two problems 
together will yield better understanding and new proto- 
cols in both the classical and the quantum case. 



X. BOUND ENTANGLEMENT 



One of our motivations for this work was a paper |^ 
by N. Gisin and S. Wolf suggesting a classical analog of 
bound entanglement. A bound entangled state is a bi- 
partite mixed quantum state which cannot be created lo- 
cally (without any prior entanglement), but from which 
no maximally entangled states can be distilled, even if 
there are many copies of the bound entangled state. It is 
as if the entanglement is "bound" inside the state, and 
cannot be released. They proposed the classical analog to 
be a sample from a probability distribution on Alice, Bob 
and Eve, P{XatXb,Xc), in which Alice and Bob have 
strictly positive intrinsic information^, but from which 
they cannot distill shared secret bits under LOPC, even 
if they have many samples from the distribution. Though 
it is not yet known if such a classical state exists, there 



^a classical measure which, loosely speaking, is designed to 
test whether or not Alice and Bob share some information 
which Eve does not have and which they can use. The hope 
was that if positive, then they would have something useful, 
and if zero, then they would have nothing. 
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is strong evidence that, by starting with a bound entan- 
gled state PAB, taking a natural purification, |'0ab_e), 
and measuring it in natural bases, we may produce a 
classical bound state. Here we simply note that bound 
information fits into our framework as a derived anal- 
ogy, and is another consequence of the deeper analogy 
between entanglement and secret classical correlations. 



XI. PURE OR MIXED? 

We have mentioned in section O that it is not 
clear whether to classify classical states of the form 
P{Xa^ Xb)P{Xe) where Xa is not completely correlated 
with Xb as pure or as mixed. Such a distribution resem- 
bles a pure state because it is not correlated with Eve: 
this is like a pure state not being entangled with the en- 
vironment. It also resembles a pure state because we 
can optimally distill shared secret bits from many copies 
of such a state at a rate equal to the natural measure 
of shared correlations, the mutual information [g2|; this 
is the analog of pure state entanglement concentration. 
However, it is not known whether such a distillation is 
reversible. That is, given the shared secret bits, can we 
produce the original states? If the answer is no, this 
would be typical behavior of a mixed state. Further- 
more, a definite similarity to mixed states is that there 
is no Schmidt decomposition for such states: in other 
words there is no way, using local reversible transforma- 
tions, to make Alice and Bob have the same values for 
their samples. 

Another similarity to mixed states is that it is not 
possible, even probabilistically, to use LOPC to pro- 
duce a pure state from one copy of such a distribution. 
For consider the bi-partite, 2-d case, where Alice and 
Bob both receive either a or a 1, with probabilities 
PoOiPiOiPoiiPii- We can assume that at least the first 
three probabilities are non-zero (otherwise they have a 
pure state). They wish to use LOPC to make a classical 
"entangled" pure state, ie. where P(00) > 0, P(ll) > 0, 
P(01) = P(10) = 0. As discussed in sectionfvj the most 
general thing they can do is to first communicate pub- 
licly, resulting in some total public message, rrii, where 
i may depend upon their local dice and upon their sam- 
ples. They may then change their samples according to 
some map which is specified by the message. For ex- 
ample, the message could tell Alice to flip her bit, and 
Bob to leave his alone. Note that the message has to tell 
them what to do locally: it cannot tell them to look at 
the other person's bit to decide what they will do. Now, 
to make a pure state with any probability they need at 
least one map which is local in the sense described above 
and which produces both 00 and 11, and nothing else. 
We shall show that no such map exists. 

Assume that such a map exists. Without loss of gen- 
erality, we may assume the map does 



00 ^ 00. 



(32) 



Since Bob has to act locally, this means that if he starts 
with a 0, he has to finish with a 0. Since they must finish 
with the same thing, this implies 

10 ^ 00. (33) 

Since they are symmetric, similar reasoning gives 

01 ^ 00. (34) 

Because they have to act locally, we now know that if 
Alice or Bob sees a 1, they have to finish with a 0. Thus 



11 ^ 00. 



(35) 



And so the map takes everything to 00, which is no good. 
For classical states in higher dimensions, the same type 
of reasoning shows that we cannot produce a classical 
pure state from a single copy of such a state. 

So, as we have shown, classical states of the form 
P{XatXb)P{Xe) have some characteristics in common 
with pure quantum states, and some in common with 
mixed quantum states. 



XII. MULTI-PARTITE RESULTS 

It is well known that entanglement is much more com- 
plicated for multi-partite systems than for bi-partite sys- 
tems [0, Q, ^^. In particular, already in the case of 
three parties, it is known that tri-partite entanglement is 
fundamentally different to bi-partite entanglement, even 
in the many copy scenario. Furthermore, there might 
even exist many different inequivalent forms of tri-partite 
entanglement. As more systems are added the problem 
becomes vastly more complicated, but we have a few re- 
sults to guide us, such as the fact that there is genuine 
entanglement at every level (again, even in the many copy 
scenario) . Here we show that many of these features have 
classical analogs. 

First, we shall look at the tripartite case. We propose 
that the classical equivalent of the GHZ state, 



1 



is a probability distribution of the form 



(36) 



P{Xa,Xb,Xc,Xe) = P{Xa,Xb,Xc)P{Xe). (37) 
where P{Xa^ Xb,Xc) is given by 



P(0,0,0) = F(l,l,l) = i, 



(38) 



We shah call this the C-GHZ (classical GHZ), and the 
classical singlet (ie. the bipartite shared secret bit) we 
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shall call the C-EPR. Is is easy to see that out of 1 GHZ 
copy we may generate one C-EPR, ie. 



C - GHZ ^C - EPR. 



(39) 



Clare simply forgets her bit. This may sound unsatisfac- 
tory since in the quantum case Alice and Bob end with 
an EPR which Clare has no control over, whereas here 
Clare could always later remember her bit, and so one 
may argue that we have not really performed the classical 
transformation. However, since Alice, Bob and Clare all 
begin with the same information and communicate only 
publicly, it is impossible for Alice and Bob to agree upon 
anything without Clare knowing it. Thus the "stronger" 
form of the transformation is impossible, and the best we 
can do is this weak form, with Clare forgetting her bit. 

The above transformation is irreversible: ie. given one 
C-EPR, it is impossible to make a C-GHZ Q. This 
is because the bi-partite entropy of secrecy can only de- 
crease under LOPC, and viewing the system as (AB) 
vs. C a C — EPRab will have entropy, whereas the 
C — GHZ ABC has entropy of 1 (and is symmetric with 
respect to all the parties). It is possible, however, to do 

C - EPRab + C - EPRbc ^ C - GHZ. (40) 

This is done as it would be in the quantum case: Bob 
makes a joint measurement on his bits (addition modulo 
2), and publicly announces the result. Bob now forgets 
his second bit, and if the pubhc message was 1, Clare 
flips her bit. They are then done. This procedure can be 
viewed as Bob using the C— EPRbc as a one-time pad to 
send Clare the value of the C — EPRab- It is again clear 
that we cannot do the reverse transformation: viewing 
the system as (AC) vs. B, the C-GHZ has an entropy of 
secrecy of 1, whereas the two C-EPR's together have an 
entropy of 2. 

The entropy of secrecy can be used to show that there 
exists more than just bi-partite secrecy, even in the many- 
copy case. Specifically, the 4-party Cat state, which has 
distribution P{Xa^ Xb,Xc, Xd) given by 



P(0,0,0,0) = P(1, 1,1,1) 



(41) 



(where Eve factors out) cannot be converted reversibly 
into C-EPR pairs. The proof of this is exactly the proof 
used for the analogous quantum problem ||l^ , and is done 
by partitioning the 4 parties into pairs in various ways, 
and looking at the entropy of entanglement, which must 
be asymptotically conserved under reversible transforma- 
tions. 

Suppose that we could reversibly convert asymptoti- 
cally a single 4-party Cat state into C-EPR pairs: uab 
between A and B, uac between A and C, etc. Partition- 
ing the system into (A) vs. (BCD) we get the equation 



Partitioning the system as (B) vs. (ACD), (C) vs. (ABD) 
and (D) vs. (ABC) gives 



nAB + nBC + nBD = 1, 



nAC + nBc + ncD = 1, 



71 AD + nBD + ncD = 1- 



(43) 



(44) 



(45) 



On the other hand, partitioning the system as (AB) vs. 
(CD), (AC) vs (BD) and (AD) vs. (BC) gives 



UAC + rLAD + riBC + nBD = 1, 



nAB + nAD + nBC + nco = 1, 



(46) 



(47) 



nAB + nAC + nBD+ncD = '^- (48) 

Summing the first 4 equations together gives 

2 Y. "^^=4, (49) 

allpairs 

whilst summing together the next 3 gives 

2 Y. "^^^3. (50) 



alipairs 



nAB + nAC + nAD = 1- 



(42) 



Thus the transformation is impossible, and the 4 party 
classical Cat state really is more than just bi-partite 
shared secret correlations. 

We thus conclude that there are different types of 
multi-partite secret correlations. 



XIII. CONCLUSION 

We have described a fundamental analogy between en- 
tanglement and secret classical correlations. The anal- 
ogy is quite simple to state. Both are resources, and 
the main objects involved in the study of such resources 
have a one-to-one correspondence, as given in the table 
on the first page. Due to this basic analogy, many de- 
rived analogies follow. In particular, we have shown that 
teleportation and the one-time-pad are deeply connected, 
that the concept of "pure state" exists in the classical do- 
main, that entanglement concentration and dilution are 
essentially classical secrecy manipulations, and that the 
single copy entanglement manipulations have such a close 
classical analog that the majorization results are repro- 
duced in the classical setting. We have pointed out that 
entanglement purification is analogous to classical pri- 
vacy amplification, and hope that the search for better 
protocols in the two areas can go hand in hand. We fi- 
nally showed that, as with entanglement, one can look 
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at multipartite shared secret correlations, and gave a fla- 
vor of how results in the quantum setting easily transfer 
into the classical world. Despite all these useful derived 
analogies, our main point is the fundamental one: entan- 
glement and shared secret correlations are deeply related, 
and one should never be viewed without the other. 

We want to emphasize that by no means do we claim 
that quantum entanglement is a fundamentally classical 
effect or that there exists a classical explanation of entan- 
glement. The classical analog of entanglement is nothing 
more nor less than a simple analog, and has a value of its 
own. On the other hand, all the aspects of quantum en- 
tanglement which are common with the classical analog 
cannot be considered to be quantum. Thus many aspects 
which were hitherto considered to be genuinely quantum 
lose their status. 

The main thrust of this paper was to identify the com- 
mon aspects of quantum entanglement and classical se- 
cret correlations. An even more interesting question to 
find those aspects which are not common. For example, 
we have not found any (and believe there is no) analog 
of super-dense coding. It is not the case that by having 
1 secret correlation bit and by sending 1 secret bit Alice 
can transmit to Bob 2 public bits. The lack of super- 
dense coding manifests itself, implicitly, also by a differ- 
ence in the quantitative descriptions of teleportation and 
one-time pad secret communication: in the case of tele- 
portation Alice has to send Bob 2 classical bits while in 
the one-time pad Alice has to send only 1 public bit. It 
is only such aspects which are not common to the two 
settings which are genuinely quantum. We hope that 
getting rid of those aspects which were believed to be 
quantum but are not, and identifying the genuine quan- 
tum ones will lead to a better understanding of quantum 
entanglement. And of secret communication. 
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